< The Portuguese Abuse Open Feed >
by seguranca-informatica.pt
Use the hashtag: #0xSI_f33d @ VirusTotal official ingestor
$:> SUBMIT NEW THREAT CAMPAIGN
Target Indicator
Category
Tag
$:>
DateVirus TotalIndicatorCategoryTagInfrastructure
05/06/2026
@b0t_x TITLE: no title recorded
malware malware
IP: 5.206.227.156
05/06/2026
@b0t_x TITLE: no title recorded
malware malware
IP: 5.206.227.156
05/06/2026
@bot_orange TITLE: no title recorded
phishing phishing
IP: 192.250.229.33
MX: gnlgroup.net
05/06/2026
@bot_orange TITLE: no title recorded
phishing phishing
IP: 185.199.108.153
05/06/2026
@bot_orange TITLE: no title recorded
phishing phishing
IP: 185.199.109.153
05/06/2026
@b0t_x TITLE: no title recorded
malware malware
IP: 5.206.227.156
05/06/2026
@community TITLE: no title recorded
phishing phishing
05/06/2026
@community TITLE: no title recorded
phishing phishing
IP: 188.114.96.3
05/06/2026
@bot_2ty TITLE: no title recorded
phishing phishing
IP: 31.22.7.7
05/06/2026
@community TITLE: no title recorded
phishing phishing
IP: 188.114.96.3
05/06/2026
@community TITLE: no title recorded
phishing phishing
IP: 64.29.17.65
CN: f039b74684f41258.vercel-dns-017.com
05/06/2026
@community TITLE: no title recorded
phishing phishing
IP: 64.29.17.1
CN: f039b74684f41258.vercel-dns-017.com
05/06/2026
@community TITLE: no title recorded
phishing phishing
IP: 64.29.17.65
05/06/2026
@b0t_x TITLE: no title recorded
malware malware
IP: 5.206.227.156
05/06/2026
@bot_2ty TITLE: no title recorded
phishing phishing
05/06/2026
@community TITLE: no title recorded
malware malware
IP: 188.114.97.3
05/06/2026
@community TITLE: no title recorded
phishing phishing
IP: 188.114.97.3
05/06/2026
@community TITLE: no title recorded
phishing phishing
05/06/2026
@community TITLE: no title recorded
phishing phishing
IP: 203.189.234.28
05/06/2026
@bot_orange TITLE: no title recorded
phishing phishing
IP: 177.155.199.120

API Documentation

API is available at https://feed.seguranca-informatica.pt/api.php and will return a CSV or JSON response.

The API is free for 7 days and account creation is required. After that, the API token will be sent to your email.
You can also donate and join our membership plan for unlimited monthly/yearly access.

Please note that running a massive amount of queries in a short time will get you blocked and/or banned.
$:> If you need an API token, please contact us here.


ParameterExample | Key Value
Parameters highlighted with red color are mandatory.
from
feed.seguranca-informatica.pt/api.php?token_u=#&token_p=#&from=today
Values: {today; yesterday; last-3-days; last-week; last-month; last-6-months; last-year}
format
...&from=today&format=csv
Values: {csv; json; raw}
tag
...&format=json&tag=malware
Values: only available tags
title_or_url
...&tag=malware&title_or_url=amazon
Example 1: ...&title_or_url=banco
Example 2: ...&title_or_url=.pt
Example 3: ...&title_or_url=.pt&tag=phishing

Returned list example: {id, url, domain, data, ip, mx, cname, vt_url, img_url, id_user, id_tag, info}

For integration with security appliances, use the raw format:

...&from=today&format=raw (get domain by line)

Friends of 0xSI_f33d

Are you using 0xSI_f33d data, but not listed here? Let us know